Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File:                     WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier:          MWgE8y0G0FAJMDjMiri23z2goUNGCXTO5T1xpNIh0rA=
Subject key identifier:   1F:AD:E9:B9:47:A2:99:F7:30:24:FC:9C:9F:8B:C0:E8:8F:DE:2E:82
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer:       /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial:       0196CA60648CD27FDF4F1333CA7574A9A133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number:          153B
Signing time:             Tue 13 May 2025 16:00:36 +0000
Manifest this update:     Tue 13 May 2025 16:00:36 +0000
Manifest next update:     Wed 14 May 2025 16:00:36 +0000
Files and hashes:         1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: IKJtc7LeJ85ncSJH0Gxa+yy5+4hPYqWGTMFiGyvl5Lk=)
                          2: aiBw7mg-7iWQbjUD1MChAVL_Coo.roa (hash: KeivAY3qo56HW2nMzFcSP1tB4CHei3XM2+AGnhTVVP0=)
                          3: jqsja3Ig_Inj8Kr-paXhHO8forw.roa (hash: lgk++/8/iHEqAJTqQrY78sNZtOq1z4JSDJP8vNMWH0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ca:60:64:8c:d2:7f:df:4f:13:33:ca:75:74:a9:a1:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
        Validity
            Not Before: May 13 16:00:36 2025 GMT
            Not After : May 14 16:00:36 2025 GMT
        Subject: CN=1fade9b947a299f73024fc9c9f8bc0e88fde2e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:18:e8:f8:f1:de:c7:b6:13:bb:de:94:7c:
                    53:08:6c:36:84:3e:77:3b:c3:82:c7:5f:13:c4:09:
                    7b:61:47:00:fb:52:53:30:0c:f0:00:a5:16:cb:d9:
                    a7:e9:0a:93:61:f4:07:d2:e4:25:c8:d4:ae:41:82:
                    a8:75:2e:21:c4:5f:11:75:bf:83:d4:9c:24:9a:f3:
                    2e:92:c2:56:2f:ed:b5:63:30:05:7f:9e:45:a3:e7:
                    dc:4a:00:18:10:8c:20:38:0c:e2:64:9d:68:f5:73:
                    ac:71:67:ce:a6:2e:6c:ad:a1:34:ee:59:80:e4:9f:
                    b0:e4:f5:34:08:96:8b:43:21:ca:f0:ba:5e:27:3b:
                    8d:ec:09:30:96:fa:24:c7:20:30:07:1a:f8:03:ee:
                    5f:15:04:ed:35:5a:9e:11:fb:e8:bd:53:91:63:e4:
                    e7:85:66:1c:84:5b:f6:cb:04:e1:d5:01:42:57:cb:
                    e3:c4:72:79:ed:fc:dd:cb:5b:4c:39:6e:9c:f6:eb:
                    a4:a9:0d:eb:5e:03:61:31:5d:1f:a6:ec:b6:ca:28:
                    bf:e0:ae:b9:87:6d:be:39:c5:9b:b5:92:04:3c:c8:
                    94:72:8a:53:97:18:11:5d:20:1b:83:91:6b:e4:cc:
                    a9:ab:c3:54:60:c1:91:21:bf:ca:3c:48:28:2e:ef:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AD:E9:B9:47:A2:99:F7:30:24:FC:9C:9F:8B:C0:E8:8F:DE:2E:82
            X509v3 Authority Key Identifier:
                keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d7:f1:9c:77:27:e8:90:76:aa:6d:86:75:bd:99:ab:72:83:
         0f:e8:46:26:bc:a5:5b:29:b1:47:42:ab:49:73:e2:f6:52:62:
         7f:77:b3:74:00:53:dd:49:f4:95:b9:28:32:2d:7b:de:b4:a6:
         9b:b7:55:b6:42:55:9b:b5:78:e7:74:b3:1e:3a:82:e8:66:bd:
         7c:21:a0:64:e6:a3:65:32:0e:fa:f5:7a:f4:82:af:df:0f:75:
         f1:14:25:24:c3:c9:12:14:20:57:bd:49:cb:fd:70:77:2b:a6:
         95:2c:8e:a1:83:e3:3d:af:c1:16:67:66:24:c5:fc:6d:25:d7:
         ec:de:ff:09:05:5d:eb:68:12:65:98:6f:d2:44:8b:fe:a1:3b:
         08:a2:03:46:24:ba:d9:3b:f9:e1:07:ce:c0:15:ee:f0:89:cf:
         0c:7e:96:8d:70:e8:4a:ab:05:6a:c9:4c:d3:14:fb:1b:08:97:
         e5:8b:cb:b5:f0:de:69:57:c8:e4:dd:0b:1a:ed:e9:88:2a:9b:
         16:6a:c3:40:21:72:04:cd:00:6b:e9:67:e9:cd:96:a0:55:37:
         36:c4:32:ee:f2:3b:e6:70:a3:d4:6f:a3:0d:4a:62:c6:41:4b:
         14:34:bd:74:c1:d0:f8:8f:82:5d:26:ab:b4:eb:c7:b5:33:bb:
         21:8b:7a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:35:57 2025 by rpki-client